Use cancan/cancan-strongparams for authorization